Solicitation_2015-N-16841_Question_and_Answer.docx

DOCX document 503 KB Posted

Attached to
Immunization Consulting and Research ARM (ICRA) Federal contract opportunity
Solicitation number
2015-N-16841
Issued by
Department of Health and Human Services Centers for Disease Control and Prevention Office of Acquisition Services

View the file

Other files for this federal contract opportunity

Other files attached to Immunization Consulting and Research ARM (ICRA), newest first.
File Type Posted
ICRA_Solicitation_2015-N-16841_Revised_Version_2.docx DOCX document
ICRA_Solicitation_2015-N-16841_Revised.docx DOCX document
Attachment_4__Full_and_Open_Task_Order__2.docx DOCX document
Attachment_3__Full_and_Open_Task_Order__1.docx DOCX document
Attachment_5__Small_Business_Set-Aside_Task_Order.docx DOCX document
Solicitation_2015-N-16841_Admendment_1.doc DOC document
Attachment_4__Full_and_Open_Task_Order__2.docx DOCX document
Attachment_5__Small_Business_Set-Aside_Task_Order.docx DOCX document
Attachment_3__Full_and_Open_Task_Order__1.docx DOCX document
Attachment_2_-_CONTRACTING_OFFICERS_REPRESENTATIVE_(COR)_EVALUATION_REPORT.docx DOCX document
Attachment_1_-_CONTRACTORS_PERFORMANCE_ASSESSMENT_REPORTING_SYSTEM_(CPARS)_RATINGS.docx DOCX document
Solicitation_2015-N-16841.doc DOC document
Show all 12

On GovTribe

Work with this file on GovTribe

  • Download the original file
  • Contacts named in this file
  • Similar government files
  • Ask GovTribe AI about this file

Text version

No.

Section
Question
Response

A

1,
A1
I was curious if this was a follow-on requirement. If so, would it be possible for you to provide the incumbent information (we need the contract number and contractor).

This IDIQ is not a follow-on or related to an existing acquisition that’s currently ongoing. Amendment will be made to clarify the CLIN description in the solicitation.

B

2.
B1
How is topic H broken out?
Topic H in the IDIQ statement of work is “broken out” as data analytics and evaluation.
3.
B2
Is more information available regarding it?
The description associated with topic H in the statement of work contains the information related to this requirement.
4.
B3
How would a specialist small business compete for this topic?
Small businesses are eligible to compete for the full and open and small business set-aside business categories. If a small business wants to be considered for both IDIQ awards, the small business must submit a proposal for the IDIQ statement of work as well as the full and open task orders and the small business set-aside task orders. A small business can choose to only compete for the small business set-aside portion by submitting a proposal for the IDIQ and small business set-aside task order. After the full and open and small business set-aside IDIQ contracts are awarded to the companies’ proposals that represent the best value, future task order requirements will be competed in either the full and open or small business set-aside category. The contracting officer in coordination with the technical subject matter experts will make a determination if a requirement can be set-aside for the small business set aside awardees or for the full and open awardees. If it is uncertain whether two or more small business awardees can perform the services, the contracting officer will request a capability statement from the small business awardees to determine if two or more have the capacity and capability to perform the services. Only companies that receive a full and open IDIQ contract award are eligible to compete for requirements designated as full and open and only small business set-aside contract awardees can compete for small business set aside requirements.
5.
B4
Does the modified due date apply to all submissions, or only submissions from parties that previously expressed intent?
An amendment to extend the due date was provided and is applicable to all aspects of the solicitation.

C

6.
C1
Could you please provide the incumbent contract information for the Comprehensive Technical, Operation, Research and Support for Immunization Information Systems requirement?
See question #1

D

7.
D1
The following notification stated that there is an update provided on May 19, 2015 8:44 am. Is there any way of identifying those update easily?
On FBO there is a Track Changes button that shows any changes made.
8.
D2
In section H.13.b, the document states: "Contractors are not required to respond to each RFTOP.". In section L.8.6 it states: ' offerors are required to respond to the full and open Task Order, as follows'. Do we need to respond to ALL RFTOP or can we select the one that is most applicable?
Section H.13 applies after the IDIQ contracts are awarded and task orders are competed. “After contracts are awarded by the Government……”

Section L.8.6 applies to the task orders that are part of the IDIQ contract solicitation.

See question #4 regarding how a contractor can propose depending on whether they want to be eligible for a full and open business category award, small business set-aside award or both.

Section L.2 and L.8.6 in the solicitation have been amended for clarity.

9.
D3
We are unable to open this link http://www.access- board.gov/sec508/provisions.htm.
The link is below:

http://www.access- board.gov/sec508/provisions.htm

E

10.
E1
I will be responding to the small business set aside portion. I see that there is a large solicitation packet (70 pages) and a smaller packet (Attachment 5, Small business set-aside task order). I wanted to be clear how my responses should integrate these 2 packets. Should I respond to each separately or should I highlight the Attachment 5 items in my response to the Solicitation.
See question #4 and #8

F

11.
F1
Section L.4 Past Performance Information (Jan 2000) states the need for 3 completed CPARS or in the case of "new joint venture" entities, the past performance shall include representation from all the joint venture partners. I believe we would qualify as a new joint venture, but unfortunately our past performances are without survey or CPARS data. Would this exclude us from responding?

If there is not any CPARS or survey data, then provide three references (including contact information) for your most recent three contracts, delivery orders, or purchase orders. This will be used in lieu of CPARS and survey data for past performance evaluations.

12.
F2
As a small business made up of two consultants the task orders (attachments 3, 4, and 5) are larger in size than projects we typically bid on. However, it is my impression that future task orders could be sized to be more in our ballpark. That said, it is my understanding that we are required to respond to and bid on attachments 3, 4, and 5 even with our lack of interest in the work as we believe this work is better suited for organizations larger than ours.

Given that, I see two options.

The first is to not bid on the work, but that would appear to disqualify us.

The second is to not respond to this solicitation, but that would appear to exclude us from any future task orders if I understand the purpose of this solicitation effort.

See question #4

G

13.
G1
Regarding CPARS: In some cases, contractors may have similar experience for which CPARS have not been issued because the work is ongoing or the government agency did not otherwise issue CPARS. Will the government consider accepting Past Performance submissions that include recent and relevant past performance from companies /agencies that do not use or have not completed CPARS?
See question #11.
14.
G2
Will the government consider extending the due date?
An amendment to extend the due date was provided and is applicable to all aspects of the solicitation.

H

15.
H1
Is it the government’s intent to have a Small Business submitting a proposal in the small business set-aside business category to respond to and price all three Task Orders contained within the solicitation? Please clarify
See question #4.
16.
H2
Please clarify if a Small Business submitting a proposal for the small business set-aside business category is required to submit all content identified in this table, that is all tabbed and titled parts of Volumes I, II and III.
Your proposal must be prepared in two volumes (Technical Proposal and Business Proposal) and three volumes if a Small Business Requests for Task Order Proposal (Submission from Small Businesses Only)
17.
H3
Please clarify what Volume Content constitutes what is referred to in L.7 (h) 1. as the “Business Proposal”.

See section L.9 Business Proposal Instructions

18.
H4
Would the government accept Past Performance submissions that include recent and relevant past performance from Government agencies that do not use CPARS, such as state and local public health departments?

Yes. See question #11

19.
H5
Would the Government accept Past Performance submissions that include recent and relevant past performance from ongoing contracts for which CPARs have not yet been issued, but a significant portion of the work has been completed?
20.
H6
Would the government accept Past Performance submissions that include recent and relevant past performance for which the 8(a) offeror was a significant subcontractor to a prime on a large government health agency contract?
21.
H7
Would the government accept the three required CPARS Past Performance submissions from both the prime contractor and proposal-listed subcontractors to ensure the provided CPARS are for similar experience?

CPARS or other past performance information must be for the prime contractor.

22.
H8
Can the government confirm that the page limit for each of the three required task orders for a Small Business is 15 pages?

15 pages for each task order.

23.
H9
Does the government expect a small business task order Price Proposal in Tab D of a small business proposal? If the answer is no, please clarify the instructions in the Proposal table’s Volume II Tab D row under the Title column?

A small business shall provide their small business price proposal in Volume II Tab D.

24.
H10
Would the government clarify what is intended in the provision that the “small business set-aside task order will replace the full and open task orders in determining the IDIQ awards”?

The full and open IDIQ awards will use the full and open task orders in the scoring for the task order criteria. The small business set aside IDIQ awards will only use the small business set aside task order in the scoring for the task order criteria.

See question #4 for further clarification.

25.
H11
Would the government consider changing the RFP’s competition/award category requirements to allow small businesses to compete only in the small business category, or to allow the full and open competition task order capabilities information to be considered in the small business competition?

It has been changed.

See question #4 and #8

26.
H12
Is it the government’s intention that the cross-reference table restricts its scope to Volume 1?

The cross-reference table is applicable to the Technical Proposal and Small Business Technical Proposal.

See revisions to Section L.7.

I

27.
I1
In the instructions (L.7), the government states the proposal must be prepared in Two volumes (Technical and Business) and three volumes for Small Business Requests for Task Order. It further states that all offers are required to respond to the full and open Task Order. In M.1 the government states for the small business set aside category awards, the small business set aside task order will replace the full and open task order. For clarification, is the government asking for small businesses to respond to the Full and Open Task Orders as well as the small business task order? If so, shall the small business response be organized the following as outlined in the RFP:

Volume 1 - Technical Proposal

· Institutional Knowledge and Understanding of the Work

· Technical Approach

· Personnel

· Management Plan

· Corporate Experience

· Task Orders

Volume II - Exceptions and Deviations

· Contract Documents and Associated Information

· Full and Open Task Order Price Proposal

· Small Business Set Aside proposal

· Financial Statements

· Conflict of Interest Certification

Volume III – Task Order Small Business

· Technical Plan and Approach

· Project Management and Operations

· Staffing Plan

· Past Performance/Similar Experience

See question #4 and #8 and Amendment to section L.7 of the solicitation.

Also, if a small business does not choose to be eligible for a full and open IDIQ award, the small business would not submit a task order in Volume I Tab I. The small business still must submit all other requirements in volume I

J

28.
J1
In section H.13.b, the document states: "Contractors are not required to respond to each RFTOP.". In section L.8.6 it states: ' offerors are required to respond to the full and open Task Order, as follows'. Do we need to respond to ALL RFTOP or can we select the one that is most applicable?

See question #4 and #8.

29.
J2
In section L.7.H, it references a 'Conflict of Interest Certification'

under Volume II.F. Can you let me know where I can locate this Certification?

Section H.7. The requirement to submit at the time of award has been deleted. If a contractor receives an award, this information will be required prior to performance.

30.
J3
When replying for 'Small Business Set-Aside Task Order', do we need to reply to Volume II part D as well as providing a Volume III. Are you expecting duplication of information in those 2 sections or can we provide a reference?
Yes. Volume II is the business proposal so the small business task order business proposal would be included in Volume II. The business and technical proposals must be separated.

K

31.
K1
Is there a standard form for a Person Loading chart? If there is, where can we locate it?
Offerors need to provide information in the technical proposal that clearly details the labor categories and hours dedicated to the requirement and how those positions will perform in relation to the SOW requirements.
32.
K2
Do small businesses have to apply for full and open?
See question #4 and #8
33.
K2
Do small businesses have to respond to all three task orders if not applying for full and open?
See Question #4 and #8
34.
K3
If small businesses have to apply for full and open do the small businesses have to apply to all three task orders or just the small business set aside task order?
See question #4 and #8
35.
K4
Could a small business apply to a portion of the work on a given task order rather than propose work for all of the work on a task order?

A company proposing as a prime must meet all of the requirements.

36.
K4
Past performance Information – What do we do if we do not have CPARS evaluations? We have worked for CDC as a sub-contractor via other organizations

See question # 11.

I

37.
L1
Is the form contained in Section “K - Representations, Certifications, And Other Statements Of Offerors” to be submitted as part of the Offerer’s proposal response or at a later date?

As a part of the proposal response.

38.
L2
The RFQ States” The contractor must provide the CDC contracting office with the name, e-mail address, and phone number of their designated CPARS representative who will be responsible for logging into CPARS and reviewing and commenting on performance evaluations.” Does the Offerer need to supply the form that conveys this information as a part of the Offerer’s Quote/Proposal or at a later date?

As a part of the proposal response.

39.
L3
Page 61 instructs the Offeror to place the Personnel section before the Management Plan. Page 63 has these sections reversed – which order is correct?

This order has been corrected in an amendment.

40.
L4
In Section “M.2 Relevant Past Performance” the government states: “The Government will evaluate past performance only on the most highly rated Offerors who are selected for award. Past performance will be based on the information provided in L4.”

In Section “L.4 Past Performance Information (Jan 2000)” the government states: “(a) Each offeror will be evaluated, in accordance with Section M of the RFP, on their past performance under existing and prior contracts and/or task orders. Offerors shall provide three (3) completed CPARS evaluations.”

At the time of submission of our IDIQ proposal response Quote, what is the specific obligation of the Offerer to fulfill the above requirement? What document(s) are to be submitted within the IDIQ proposal response? Do these count against page limitations? In what Volume and Section of the Offerer’s proposal should these documents be placed? If the Offerer has no prior CPARS evaluations, how does the Offerer meet this requirement?

See question #11 and revision of section L.4 of the amended solicitation.

41.
L5
The instructions for the Business Proposal volume include a subsection addressing “F. Conflict of Interest Certification.” What does the Offerer need to supply to fulfill the requirements of this section? Is there a particular form or template to provide or guide the Offerer’s response?
See question #29.
43.
L7
The RFQ instructions oblige the Offerer to address 1) ”IT Information Security” and provide a copy of its Information Security Plan, and 2) Provide a copy of the Section 508 template. Does the Offerer need to provide these items at this time as part of its proposal to the government? If so, do they count against page limits? In what Section or Tab should these documents be supplied?
Yes, they will be provided as a part of the proposal. They do not count against the page limit. They will be in Volume II, Tab B.
44.
L8
This IDIQ currently has two Task Orders that each require price quotes and loaded labor rates and hours as part of the Business Proposal. Is the government also asking the Offerer to supply at this time labor categories and rates for use with possible future Task Orders that may be issued against this IDIQ ((such as would be the case with a Blanket Purchase Agreement)?
No, offerors must only provide the labor categories, labor rates, and descriptions for the current IDIQ task orders.
45.
L9
Will the government accept hand delivered proposals? If so, to whom and at what address should these be delivered?
Yes, they can be hand delivered or mailed and received by the due date. An extension to the proposal due date has been granted to accommodate this.

The proposal must be signed by an official authorized to bind your organization. You must submit one (1) original and eight (8) copies of your proposal to:

Centers for Disease Control and Prevention Procurement and Grants Office 2920 Brandywine Road Atlanta, GA 30341

Attn: Christina McMillian, Contract Specialist Solicitation No. 2015-N-16841

46.
L10
Are the two current Task Orders each single award or multiple award? If a multi-award, approximately how many awards does CDC expect to make for the Period of Performance for EACH Task Order?
All task orders are single awards.
47.
L11
What is the “Not to Exceed” amount for each of the two Task Orders?

Not to exceed amounts for full and open and small business task orders below:

Task 1 (Full and Open): $2 million Task 2 (Full and Open): $450K Small Business: $2.2 million

This is an estimated amount for proposal purposes. Contractors shall propose the not to exceed amount that reflects their technical solution to complete the project.

M

48.
M1
Task Order #1 references the “NCIRD IIS Policy Decision Report.” If this document is NOT the same as the NCIRD National IIS Strategic Plan, would you please make a copy of it available to Offerors?
The NCIRD IIS Policy Decision Support Document is a part of an ongoing project and not available for release at this time.

N

49.
N1
We would like to respectfully request the Government consider extending the due date for the above-referenced proposal one week after the current due date (June 23, 2015) to provide additional time for the contractor to be able to adequately assess the impact of the answers to questions due today, fully address the RFP requirements and assess the associated risks?

An amendment to extend the due date was provided and is applicable to all aspects of the solicitation.

O

50.
O1
The RFP Page 9, Special Considerations Security and Privacy read “This SOW requires the successful offeror(s) to have the ability to host and maintain a system for data collection, management, use and reporting to support activities funded by the federal government.”

Since there are not currently any development or system requirements described in the IDIQ or either sample task, is this security requirement for the SSP waived for the proposal phase and will be required on resulting Task Orders that may have that requirement?

While the statement of work specified does not call for system development; data access, integrity and security will be necessary to fulfill the stated scope. The draft data security plan should detail all necessary efforts by the offeror to ensure data integrity and security based upon stated federal guidelines and standards. “Information Security is applicable to this solicitation because all information systems developed, operated, or used by or on behalf of the federal government must comply with Federal Information Security laws, policies and standards.”

51.
O2
In the RFP, Page 10 reads ”The offeror shall allocate staff and specify a budget line item for maintaining computer and data security on the licensing contract and for maintaining the SSP.” If the answer to the previous question does not remove the SSP requirement, could the Government please clarify where this budget line item should be specified since there is not a budget associated with the IDIQ proposal.
Section C has been revised.
52.
O3
Regarding Page 60, Item 6 Task Orders, of the RFP, will the Government please confirm that the three sample task orders included as attachments 3 – 5 on this solicitation will be evaluated in support of the IDIQ awards but will not be awarded?

The three task orders will be awarded.

53.
O4
In the RFP, Page 59 L.4 reads “Offerors shall provide three (3) completed CPARS evaluations.”

0. Is it the government’s intention that offerors need to submit the actual CPARS or list the CPARS to be evaluated?

0. Are the CPARS intended to correlate with Corporate Experience section and if so, is it the government’s intention that the CPARS be included in the Corporate Experience section of the IDIQ?

0. If it is the government’s intention that the offeror provide the actual copies, are the copies outside the 5 page limit?

CPARS responses will be used in the past performance evaluation. See question #11.

54.
O7
We request clarification regarding the scope of work for the subject IDIQ and future RFTOPs. In particular, does the fact that some staff may have routine access to procurement, strategy, future direction of the Divisions, calendars, presentations, or email while performing their job create an organizational conflict of interest (OCI) such that the Contractor will then be eliminated from future RFTOPs due to an actual or perceived OCI?

Contractors that assist the Government in writing a Statement of Work and assisting a procurement cannot compete for that specific award.

55.
O7
Does signing the nondisclosure agreement (NDA) mitigate the actual or perceived OCI?
No

P

56.
P1
Would the government consider removing the page limits per section, but keeping the overall page limit for the technical volume.
There will be no changes to the page limits
57.
P2
On page 6 it states in regards to Technical Assistance, the contractor will “Assist CDC to engage necessary stakeholders to facilitate policy change to support the ability to use IIS data for health care delivery and outbreak response…” The task description also describes the development of communications tools to communicate pending policy changes. Can the government clarify that this technical assistance description is meant to describe communications during the development of the implementation road map and not after-the-fact?
This is meant to describe communications during and after the development of the roadmap implementation.
58.
P3
Is the assumption correct that the Stakeholder Engagement Strategy due at 2 months after award details how stakeholders will be engaged during the development of the implementation plan? Is there any expectation that the strategy will extend beyond the period of performance?
The stakeholder engagement strategy should describe how stakeholders will be engaged during the development of the implementation roadmap.

CDC has not determined if the strategy will extend beyond the period of performance.

59..
P4
Can CDC share the logic model referenced at the top of Page 3?
60.
P5
Should the proposed timeline include up to 6 months for OMB clearance, or does CDC have an omnibus clearance that can be used for this effort?
The OMB PRA process should be factored in the project schedule when delivered subsequent to award and the appropriate project management planning should be conducted upon project award to determine the length of time to include in the schedule to accommodate the OMB PRA approval process.
61.
P6
In the Scope of Work, for item k, titled “Survey design, development, and implementation”, could you clarify whether surveys to be conducted are expected to be for the general population and/or subgroups of the population (e.g., population 18+, children or teens) or are expected to be surveys of IISs or related agencies, or both populations.
All noted groups (i.e general population and/or subgroups of the population (e.g., population 18+, children or teens), IISs or related agencies) can be the subject of surveys.

Q

62.
Q1
The RFP states "Prior VTrckS ExIS evaluation work has included the development of a logic model for the ExIS vaccine ordering and inventory solution, identification of desired outcome measures and development of a proposed evaluation design to meet proposed evaluation objectives." To assist in preparing an evaluation plan that reflects CDC's thinking of ExIS, would CDC provide a copy of the most recent logic model for the ExIS vaccine ordering and inventory solution?
63.
Q2
What is the proposed level of effort for Task Order #1? What is the proposed level of effort for Task Order #2?

See question 47.

64.
Q3
In Attachment 4 – Full and Open Task Order #1 on page 4, it references the NCIRD IIS policy Decision Report. Can CDC provide a copy of this report?
The NCIRD IIS Policy Decision Support Document is a part of an ongoing project and not available for release at this time.
65.
Q4
The RFP states the following: “Offerors shall provide three (3) completed CPARS evaluations. The solicitation also includes Attachment 1 – CPARS Ratings and Attachment 2 – COR Evaluation Report. Where should the CPARS evaluations be included in the offeror’s proposal, i.e., Volume I or Volume II?

Volume II, Tab B.

66.
Q5
The RFP states to submit one electronic version of all proposal documents on a CD with the proposal submission. Should the CD contain all documents from the Technical Proposal (Volume I) and the Contract Documentation and Price Proposal (Volume II) on one CD?

Yes, Volume II must be on a separate CD from Volume I. Volume I and Volume III can be on the same CD.

67.
Q6
On page 8, Special Considerations, the RFP states the following: “the following information shall be addressed in a separate section of the Technical Proposal entitled, “Information Security.” On page 67, L.10 Systems Security, the RFP states the following: “Proposal must include a copy of the offeror’s systems security policy and practices.” Should Information Security (Systems Security) be included as an appendix to the Technical Proposal (Volume I) or as an appendix to the Contract Documentation and Price Proposal (Volume II)?

Volume II, Tab B.

68.
Q7
How many hours would be considered a full-time equivalent?
Each offeror must determine the number of hours to propose each Task Order.
69.
Q8
Under Section 1, Technical approach and Understanding of the Work (item 2), it states to provide a detailed discussion of proposed plans to manage the tasks required in the Statement of Work (i.e. communication & supervision of offeror employees, plans for communicating with CDC personnel, and stakeholders’ organization chart, etc.). Can CDC elucidate what the "etc." refers to so that we can structure our management approach appropriately to the evaluation criteria requirements?
The etc. refers to other necessary management activities required to manage the IDIQ and task orders.

R

70.
R1
Section M.1, page 69 of the RFP indicates “For the small business set-aside business category awards, the small business set-aside task order will replace the full and open task orders in determining the IDIQ awards.” Can the government clarify if companies competing for a small business award are only required to submit a proposal response to the small business set-aside task order? Or does the government expect small businesses to respond to all three sample task orders?

See question #4 and #8.

71.
R2
Please confirm that the appropriate NAICS code for this opportunity is 541512, as listed on page 56, and not 541611, as listed on page 66.
541512
72.
R3
Will the government provide a staff level of effort for the small business task order?
See question #47.

S

73.
S1
Page 8 states that “This SOW requires the successful offeror(s) to have the ability to host and maintain a system for data collection, management, use, and reporting to support activities funded by the federal government,” and Page 10 indicates that “The Offeror shall allocate staff and specify a budget line item for maintaining computer and data security on the licensing contract and for maintaining the SSP. In conjunction with the CDC Center ISSO, the Offeror will help complete the necessary additional documents to obtain a CDC Certification and Accreditation. Those documents included are listed below. Normally, these documents will be completed by the CDC Center ISSO/Security Steward with information provided by the Offeror. Templates of the documents will be provided to the offeror after award.

· Baseline System Information (BSI)

· Privacy Impact Assessment (PIA)

· Host Characterization Worksheet (HCW)

· System Security Plan (SSP)

· Security Baseline Worksheet (SBW)

· Business Continuity Plan (BCP)

· Risk Assessment Report (RAR)” Question: Please clarify if these requirements are applicable to contractors that will provide only advisory services and not provide any technology solutions and system integration support.

While the statement of work specified does not call for system development; data access, integrity and security will be necessary to fulfill the stated scope. The draft data security plan should detail all necessary efforts by the offeror to ensure data integrity and security based upon stated federal guidelines and standards. “Information Security is applicable to this solicitation because all information systems developed, operated, or used by or on behalf of the federal government must comply with Federal Information Security laws, policies and standards.”

This information can be included in Volume II tab B

74.
S2
Pages 8-13, the Special Considerations in Section C identify several information security requirements that must be addressed in a Contractor’s proposal. Page 8 says the intent of these requirements are to “assure that the existing data system, which would be licensed for use by CDC grantees and CDC employees, meets the security standards described…”

Question: If the systems that the Contractor would use on behalf of the government to support activities funded by the federal government will not be “licensed for use by CDC grantees and CDC employees,” then does the Contractor need to have a section in the Technical Proposal addressing ‘Information Security’ (including a Draft Data System Security Plan or information system security plan (SSP))?

See question #73.

75.
S3
Page 10, under the Special Considerations in Section C indicates that “[T]he Offeror shall respond to the following seven security–associated requirements in the application”

Question: To what Contractor “application” are the seven security-associated requirements applicable? (1) Position Sensitivity Designations, 2) Privacy Compliance, 3) Offeror’s Official Responsible for Information Security, 4) Rules of Behavior, 5) Information Security Training, 6) Encryption, 7) 508 Compliance) See the answer to question #50.

76.
S4
Pages 45-46, under Section I.11, indicates that “This clause applies whether the entire contract or order (hereafter ``contract''), or portion thereof, includes information technology resources or services in which the Contractor has physical or logical (electronic) access to, or operates a Department of Health and Human Services (HHS) system containing, information that directly supports HHS' mission.”

Question: What “Department of Health and Human Services (HHS) system” will the Contractor have access to or operate within the scope of this contract? If the Contractor will only have access to and operate their own systems in support of activities funded by the government, will the HHSAR 352.239-72 Security Requirements for Federal Information Technology Resources and Section 508 accessibility requirements still be applicable?

See the answer to question #50.

77.
S5
Page 33, Section H.15 Telework indicates that “Contractors are required to use Government-Furnished Equipment (GFE) that has been properly configured for security controls by CDC’s Information Technology Services Office (ITSO)”

However, Pages 43-44, in Section I.9 states that “The Contractor shall configure its computers that contain HHS data with the applicable Federal Desktop Core Configuration (FDCC) and ensure that its computers have and maintain the latest operating system patch level and anti-virus software level.”

Also, section L.9 on page 66 states that “It is HHS policy that contractors provide all equipment and facilities necessary for performance of contracts;”

and Page 65, Section 6.0 Task Order Evaluation Criteria states that “The offeror shall demonstrate the ability to provide physical facilities with adequate space and equipment to meet the requirements of this solicitation, including computer, communication, and audio equipment.”

Question: Please clarify whether the Contractor will be required to use GFE offsite, the Contractor’s furnished computer equipment or both.

Access to the CDC network to carryout project activities, communication and review historical information will require Government Furnished Equipment (GFE), which will be provided by CDC. The considerations for GFE are outlined in the task orders.

78.
S6
The table provided in Section L7 (page 61 of the RfP) mentions a “CONTRACT DOCUMENTATION AND PRICE PROPOSAL.”

Question: Is the “CONTRACT DOCUMENTATION AND PRICE PROPOSAL” the same thing as the “BUSINESS PROPOSAL” requested in Section L9?

Volume II contains the business proposal as well as the other information listed in L.7.

79.
S7
The table provided in Section L7 (page 61 of the RfP) provides a list of sections required for a “CONTRACT DOCUMENTATION AND PRICE PROPOSAL.” These sections in the table don’t align to the list of sections given in Section L9 required for the “BUSINESS PROPOSAL.”

Question: How should the sections in the Business Proposal Volume be ordered? Can you clarify how the instructions under L9 should be aligned to and combined with the instructions in L7?

Section L.7 gives an overview, whereas Section L.9 goes into greater specificity. For information on how to construct the business proposal, refer to L.9.

Refer to question #78.

80.
S8
The table provided in Section L7 (page 61 of the RfP) provides a list of sections required for a “TECHNICAL PROPOSAL.” These sections in the table don’t align to the list of sections given in Section L8 required for the “TECHNICAL PROPOSAL.” For example, the order of the “Personnel” and “Management Plan” sections are reversed.

Question: Can you clarify how the instructions under Section L8 should be aligned to and combined with the instructions in Section L7?

See question #39.

81.
S9
The table in Section L7 (page 61) uses an alphabetic numbering system which does not align to the numeric system used in Section L8 for the “Technical Proposal” nor to the alternate system used in Section L9 for the “Business Proposal.”

Question: Please clarify the required section-numbering system for the two proposal volumes.

See question #39.

82.
S10
Section C — Performance Work Statement/Special Considerations/Security & Privacy states that “the following information shall be addressed in a separate section of the Technical Proposal entitled, ‘Information Security.’” However, this section is not mentioned nor described in the later guidance in Section L explaining the structure of the required Technical and Business Proposals.

Question: Should we to add a tab on to the end of the Technical Proposal entitled ‘Information Security’ or should that information be included in some other defined portion of the Technical Proposal?

This can be included in Volume II tab B and is not a part of the technical proposal.

83.
T1
Reference L.7 General Instructions and L.8 Technical Proposal Instructions. Please provide clarification on the government’s preferred proposal structure for the tab titles in Volume III, Small Business Task Order vs the Sections listed in the table in L.8 6. for Task Orders.

a. For the Volume I Technical Proposal, the Personnel (Tab F vs. Section 2) and Management Plan (Tab G vs. Section 3) sections differ in order – which order does the government prefer?

b. For the Small Business Task Order, should there be a separate section for Facilities & Equipment, or would the government prefer it be included in the Tab B.2?

c. For the Small Business Task Order, what are the Evaluation Criteria and respective weighting for B.2 Project Management and Operations?

a. See question #39.

b. In amended RFP, see Volume III, Tab B.4.

c. See amended RFP Section M.1 for weighting.

84.
T2
Reference L.8 Section 4. Personnel. This section asks for “% time for each proposed [IDIQ] staff.” This will vary over time from 0-100% depending upon if/when task orders are awarded. (That is, IDIQ management resources would not be dedicated without task orders to manage.) Can the government please clarify the request and/or instruct bidders to assume a specific number of awarded task orders when responding to this requirement?
Offerors should provide the best possible estimate of the percentage of time for the individuals identified as qualified technical, administrative and/or staff labor resources to address the IDIQ and task order objectives and requirements.
85.
T3
Reference Attachment 5 – Small Business Task Order, Section 7 – Deliverables. What documentation artifacts will be available to the selected contractor for the analyses and preparation of the following Deliverable Items:

a. Evaluation input for Program Assurance Findings

b. Project status and plans for performing technical evaluations and determining the Current State Baseline

c. Existing risks being managed and status of each for inclusion in the Risk Assessment Report and log

d. Board and working group charters for the development of IIS Processes and Procedures

Selected vendor will have access to all existing work products and deliverables available and currently used to support the IIS strategic plan effort and associated initiatives. The selected vendor will also provide support to strategic initiatives and Board meetings and will have the appropriate access to project teams and Board members needed to carry out the objectives/requirements of the small business task order.

86.
T4
Reference Attachment 5 – Small Business Task Order, Section 7 – Deliverables. In order to determine the effort associated with the Task 2 Item “Meeting Presentations, Other Materials and Facilitation,”

a. How many Board workgroups are there and how often do they meet?

b. How often does the IIS Internal Workgroup meet?

a. Executive Board meets on a quarterly basis, but depending on the strategic initiative the Board is being leveraged to provide input, the Board can meet more frequently in between those meetings (i.e. monthly, bi-weekly, ad-hoc).

b. IIS Internal Workgroup meets once per month

87.
T5
Reference Attachment 4 – Full and Open Task Order #2, Section 2 – Purpose. What “CDC artifacts from prior ExIS work” will be made available for supporting the creation of the evaluation plan?
88.
T6
Reference Attachment 4 – Full and Open Task Order #2. There is no travel section in this Task Order. Does the government anticipate that all collaboration with IIS awardees will take place at CDC in Atlanta or via teleconference, or is there an amount set-aside for travel that all offerors should include in their pricing?
Offerors should include in their proposal the best approach for “collaboration with awardees” and indicate whether or not travel will be required in their proposal.
89.
T7
Reference Attachment 3 – Full and Open Task Order #1. There is no travel section in this Task Order. Does the government anticipate that all engagements/interviews with stakeholders will take place at CDC in Atlanta or via teleconference, or is there an amount set-aside for travel that all offerors should include in their pricing?
Offerors should include in their proposal the best approach for “collaboration with awardees” and indicate whether or not travel will be required in their proposal.
90.
T8
Reference Section L.4 (page 59) – “Offerors shall provide three (3) completed CPARS evaluations.” The government is not always diligent about completing CPARS and therefore a small business offeror may not have received three (3) completed CPARS for even a large portfolio of relevant existing and prior contracts. Questions:

a. Are there other acceptable ways to satisfy the past performance requirement?

b. If fewer than 3 completed relevant CPARS exist, will that be considered a “fail” for that evaluation criteria?

See the answer to question 11.

91.
T9
Reference Page 9, Security and Privacy: – “Offeror should demonstrate understanding of security requirements by attaching a Draft Data System Security Plan or information system security plan (SSP). The SSP should be a brief and general narrative description of the system and its integration with the CDC Network Infrastructure.” Given this is not a system development project which system is the SSP meant to govern?
While the statement of work specified does not call for system development; data access, integrity and security will be necessary to fulfill the stated scope. The draft data security plan should detail all necessary efforts by the offeror to ensure data integrity and security based upon stated federal guidelines and standards. “Information Security is applicable to this solicitation because all information systems developed, operated, or used by or on behalf of the federal government must comply with Federal Information Security laws, policies and standards.”

This information can be included in Volume II Tab B

92.
T10
Is the work on the sample Task Orders currently being performed? If so, could the Government state the incumbents and their respective contract numbers?
This IDIQ nor the included Task Orders is not a follow-on or related to an existing acquisition that’s currently ongoing. Amendment will be made to clarify the CLIN description in the solicitation.

93.

T11
Will the task orders be awarded with the IDIQ contract award?
All task orders will be awarded.
94.
T12
Reference Page 66, Section L.9 (e) Price Proposal for Task Order(s): Would the government consider another CDC awarded IDIQ rate schedule as the backup/comparison documentation to verify the proposed labor rates as opposed to a GSA schedule?
Yes, only if the vendor does not have a GSA schedule. Providing GSA schedule labor categories, labor rates, and descriptions is the preferred method. If these are not available, other government contracts can be considered.
95.
T13
Full and Open Task Order 2: Please confirm the place of performance is contractor site.
Work will be performed at the offices of the Centers for Disease Control and Prevention, in Atlanta, GA.
96.
T14
Reference M.1 on page 69: “For the small business set-aside business category awards, the small business set-aside task order will replace the full and open task orders in determining the IDIQ awards.” If a small business bidder is not interested in a full and open award, would the government consider eliminating the need to respond to large business sample task orders?
See question #4
97.
T15
Because Task Order 3 is more general in scope, and to better allow the government’s comparison of bidder’s pricing of Task Order, would the government provide an estimated level of effort for that Task Order?

See question #47.

98.
U.1
Section C, Special Considerations, indicates offerors should provide “a separate section of the Technical Proposal entitled ‘Information Security’.” Can this information be provided in an Appendix of the Technical Proposal and therefore not be included in the page count?
This can be added to Volume II Tab B will not be included in the page count.
99.
U2
Section C, Special Considerations, includes a requirement for offerors to provide a Draft Data System Security Plan (SSP). Can this SSP be included as an Appendix to the Technical Proposal and therefore not be included in the page count?
This can be added to Volume II Tab B will not be included in the page count.
100.
U3
Section C, Special Considerations, We noted that the categorization of system developed or used under the IDIQ will be “moderate” (pg.10). Should we assume the FIPS 199 security categorization level for the systems that will be used or developed under Task Orders 1 and 2 will be the same?
See the answer to question #50.
101.
U4
Section C, Special Considerations, We noted that the categorization of system developed or used under the IDIQ will be “moderate” (pg.10). Should we assume the FIPS 199 security categorization level for the systems that will be used or developed under any future task orders will be the same?
See the answer to question #50.
102.
U5
Will the contractor be required to submit a Privacy Impact Assessment for any system under Task Order 1 or 2?
Yes, support for the development of the PIA and other CDC certification and accreditation artifacts will be required for any developed systems
103.
U6
Will the contractor be expected to participate in a certification and accreditation (C&A) effort for any system developed or used under Task Orders 1 and 2? If so, what is the expected level of involvement from the contractor? Are there any ongoing C&A activities that should be included in the proposed budget?
Yes, support for the development of all CDC certification and accreditation artifacts will be required for any systems developed
104.
U7
Section C, Special Considerations, 508 Compliance, requires offerors to “prepare an HHS Section 508 Product Assessment Template.” Since the IDIQ does not specify specific work products, could CDC clarify whether this template should be completed only for the specific scor of work of the Task Orders or in a more general manner for the IDIQ? Also, can the 508 Product Assessment Template be included in an Appendix and not count towards the page count?
The template should be completed for each package submission evaluating the conformance of any applicable products and services to 508 and can be included in Volume II Tab B.
105.
U8
Section L.4, Past Performance Information, indicates offerors should provide “three (3) completed CPARS evaluations.” Section M.2 (p.69) does not mention the CPARS. Can CDC confirm that the 3 CPARS evaluations are required? If so, in what volume should these be included and will they be counted outside the page count?
See question #11. Documents can be included in Volume II Tab B.
106.
U9
Section L.7.h.4, asks offerors to include a “cross-reference table that relates the technical evaluation criteria and sub-criteria sections to proposal page numbers.” Should we create a cross-reference table for each of the separate Task Orders or just for the IDIQ response?
Both.
107.
U10
Section L.7, General Instructions, Proposal Composition and Page Limitations table shows the order of technical sections for the IDIQ as “Institutional Knowledge and Understanding of the Work; Technical Approach; Personnel; Management Plan; Corporate Experience.” Section L.8, Technical Proposal Instructions, and Section M, however, present the order as “Institutional Knowledge and Understanding of the Work; Technical Approach; Management Plan; Personnel; Corporate Experience.” Could CDC please confirm the correct order for each section of the IDIQ technical volume?
See question #39.
108.
U11
Section L.7, General Instructions, Proposal Composition and Page Limitations table gives the page count as 5 pages for Personnel and “10, not including resumes” for Management Plan. Can CDC confirm that these are reversed and that the page limit for Management Plan is 5 pages and for Personnel is 10 pages, not including resumes?
See question #39.
109.
U12
What level of staff and how many staff should be described in the Personnel section?
Offerors should provide the appropriate resource and staffing approach based on the IDIQ and task order requirements in their proposal response.
110.
U13
In the Technical Proposal Instructions for the Personnel section, the RFQ asks offerors to “include % time for each proposed staff.” Is this required for the IDIQ proposal section, since no labor effort is applicable at the IDIQ level?
Interested vendors should provide the appropriate staffing approach and % time for each proposed staff based on the IDIQ and task order requirements in their proposal response.
111.
U14
Section L.9, Business Proposal Instructions, mentions a Small Business Subcontracting Plan for the IDIQ. This is not included in the table under Section L.7, General Instructions, Proposal Composition and Page Limitations. Under what tab should the Small Business Plan be included?
It can be included in Volume II Tab B.
112.
U15
Section L.9 (c), Business Proposal Instructions, Subcontracting Plan, mentions a Small Business Subcontracting Plan for the IDIQ. Subsection e, Price Proposal for Task Order(s) requests a Subcontracting Plan for each Task Order. Can CDC confirm that separate Subcontracting Plans are required for the IDIQ and each Task Order?
Large businesses shall provide an overall subcontracting plan for the IDIQ.
113.
U16
Is this a GSA schedule bid? If so, which GSA schedule is it under? If not, does CDC want offerors to propose labor categories?
This is not a GSA schedule RFP. Vendors should propose labor categories and provide a description that clearly explains the labor categories. GSA schedule is the preferred source of reference for labor categories, labor rates, and descriptions.
114.
U17
Section L.10 requests offerors to “include a copy of the offeror’s systems security policy and practices.” Can CDC clarify in which volume this should be included?
This can be included in Volume II tab B.
115.
U18
Attachment 3, Task Order 1, Section 4, Tasks To Be Performed, references the NCIRD IIS Policy Decision Report. Can CDC share a copy of this report?
The referenced document is under development and will be available only to authorized personnel until completion.
116.
U19
Attachment 3, Task Order 1, Section 9, Special Considerations: Can CDC clarify how OMB review of interview instruments will affect the stakeholder interview schedule

This is the start of the file's text. The full file is on GovTribe.

File details come from the government source that posted it. Updated .